Privacy policy
What we collect, and what we do with it.
Rosec is run by two people. This policy is written plainly because we would rather you actually read it than agree to something you did not. Last updated 11 August 2026.
Who we are
Rosec is a farm-direct supplier of Ecuadorian roses, founded and operated by Amira Zaza and Jose Cordova, based in Vancouver, British Columbia, Canada. For anything in this policy, write to [email protected].
What we collect
Only what you type into the quote form. Nothing else, and we never buy contact data from anyone.
- Required: buyer type, your name, business email, destination country and approximate volume.
- Optional, if you choose to add them: company, phone, city, date needed, stem length, varieties and your message.
- Recorded automatically with your request: the time you sent it and the page address you sent it from.
We do not ask for payment details anywhere on this site, and requesting a quote never requires payment.
Why we use it
To answer your request: check availability with our partner farms, price your route and reply to you. That is the whole purpose, and it is what the consent checkbox on the form covers.
If you also ticked the separate optional box, we may email you when varieties you asked about come into season and remind you about peak-season allocation. That box is never ticked for you, it is never required to get a quote, and every one of those emails carries an unsubscribe link. If you did not tick it, we will not send you marketing, full stop.
How long we keep it
24 months from your last contact with us, then it is deleted. Rose buying runs on annual seasons, so a request made for one Valentine's Day is still useful context the following year. After that it stops being useful and we get rid of it. You can ask us to delete it sooner at any time.
Who can see it
Only Amira Zaza and Jose Cordova. No sales agents, no call centre, no data brokers. We do not sell your information, and we do not share it for anyone else's advertising.
Three service providers process data on our behalf, and only to keep the site running:
- Supabase stores quote requests. Our database is hosted in the Canada Central region, so your request does not leave the country.
- Cloudflare serves this website and provides the anti-spam check on the form.
- Google Workspace hosts our email, so it handles our correspondence with you.
Cookies and analytics
This site sets no advertising or tracking cookies, which is why you are not seeing a cookie banner. We use Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you. The form is protected by Cloudflare Turnstile, which checks that a request comes from a person rather than a bot.
If we begin advertising and add measurement tags that do use cookies, we will update this page and add a consent banner before those tags go live.
Your rights
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you can ask us to show you what we hold about you, correct it if it is wrong, or delete it. Email [email protected] and we will action it and confirm when it is done. There is no charge and you do not have to explain why.
To stop marketing emails, use the unsubscribe link in any of them, or just reply and say so. If you are not satisfied with how we handle a request, you can raise it with the Office of the Privacy Commissioner of Canada.
Changes
If this policy changes we will update the date at the top. Material changes to how we use your information will not be applied retroactively to data we already hold without asking you first.